Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: cu86SIaeH0dPZ8DQaGfnKwUDtTSfgoNiDGH6uqC/qL0=
Subject key identifier: 64:E8:D5:4F:91:07:6A:68:D9:00:1E:E5:91:A3:35:E1:EB:2B:40:77
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 019780FB2E5E5152CC8ACA579E26FA623FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 0EF1
Signing time: Wed 18 Jun 2025 03:00:34 +0000
Manifest this update: Wed 18 Jun 2025 03:00:34 +0000
Manifest next update: Thu 19 Jun 2025 03:00:34 +0000
Files and hashes: 1: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: VOaHNYc8LFaMwuWfQc4IhFAPh/9qf4AbCfQRCxS8tcU=)
2: ju7OLwWOvoLnlAHiuO4kBTFVzwY.roa (hash: e9FAsffXnl64K8Cv3+KjxTUevpgUYG3UY/wewoBEVBQ=)
3: nbL7-TNKQqJ1-yJVoHEn9a5u6DU.roa (hash: tfXwKToKmsCep/7a6KKpGiz+Hfu7rsnL13FXZOQiKEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:fb:2e:5e:51:52:cc:8a:ca:57:9e:26:fa:62:3f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Jun 18 03:00:34 2025 GMT
Not After : Jun 19 03:00:34 2025 GMT
Subject: CN=64e8d54f91076a68d9001ee591a335e1eb2b4077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:60:7b:87:cb:c2:62:6d:7f:02:2b:c0:68:
e9:42:ba:83:a4:b1:18:4d:48:b3:fa:66:a8:70:2f:
d2:b8:77:dd:3e:bc:95:a2:29:03:6c:9b:c8:61:e9:
5c:e4:f9:96:f6:1f:c2:a7:a1:65:29:b9:a7:58:f3:
17:67:3d:51:92:0a:5c:fe:de:5d:27:89:85:00:a0:
6d:9b:92:cd:e0:cb:3e:27:28:f4:0e:8c:e7:d5:05:
34:f3:5b:43:bd:22:3f:d9:46:64:db:d9:26:6e:3b:
19:0f:92:de:6a:26:44:47:91:64:8f:bf:f5:b0:92:
48:e2:62:8f:0c:a3:37:fc:23:78:5a:35:34:67:32:
53:e0:a4:c4:d9:e6:11:b7:7e:1b:84:9e:6f:1d:77:
a7:0b:9f:ef:2f:b3:4d:06:b8:51:d3:ef:13:f6:0e:
de:ec:b0:22:6f:4d:ba:42:1e:e2:7b:68:79:f1:c5:
66:b3:89:21:35:0e:ea:50:8c:cb:e2:89:00:48:61:
31:c2:0b:da:2a:41:8c:44:71:08:5a:b5:ff:95:68:
ea:0d:e8:a0:c6:ae:e4:91:d2:2a:ae:5b:aa:52:38:
42:6a:92:c6:b3:93:a5:05:41:39:e8:3b:f4:91:3f:
05:63:50:9b:02:ec:10:43:3a:a4:40:22:ce:5b:1f:
4c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E8:D5:4F:91:07:6A:68:D9:00:1E:E5:91:A3:35:E1:EB:2B:40:77
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e1:24:f4:9f:4b:63:fc:02:7b:cd:77:3e:f1:c7:38:0b:c5:
94:38:49:e2:67:a0:b9:29:cd:b8:b0:e8:db:14:6b:99:99:71:
73:0b:bd:9b:0c:08:58:43:af:46:1d:17:99:f9:13:64:e2:53:
9b:57:e1:34:71:6a:92:e5:73:97:04:77:f1:f2:b1:e6:e3:70:
30:ed:b7:9d:c7:71:d0:13:da:85:86:76:e1:e0:02:15:10:42:
c5:1f:e4:3c:76:5c:da:d3:b1:96:48:67:0b:58:9d:91:d4:42:
e2:3a:df:d4:e1:f4:35:58:ac:79:97:07:9f:d4:ab:ef:dc:7c:
c2:6a:85:7e:b0:a8:16:88:1a:22:8a:d1:ad:ea:d3:fa:40:42:
64:69:f6:ad:0a:96:9a:81:8c:99:39:6c:3b:02:af:01:a0:b8:
37:b7:3c:56:68:0f:5e:40:27:54:b5:6e:5a:bb:a4:e6:7c:87:
28:7d:d4:0e:0b:e3:82:81:af:58:e2:46:84:2d:e2:9d:ae:e2:
9b:b4:de:e4:0a:fa:2c:a9:78:4c:23:3c:c4:d5:cc:cf:33:a8:
39:16:00:99:99:0e:d0:26:49:76:f7:01:c4:c8:27:7a:7c:46:
fb:b9:7e:cc:3b:76:c6:ec:01:19:94:56:dd:d3:90:69:69:cb:
f5:a0:ea:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:40:17 2025 by rpki-client